Privacy Policy
Short version: this is a static site with no cookies, no trackers, no accounts and no forms. The only personal data it handles is the server log every web server writes. Last updated 2026-10-01.
1. Controller
The data controller is [pending: entity name], [pending: postal address]. Privacy questions and requests: [pending: contact mailbox].
2. What the website collects
| Data | Details |
|---|---|
| Server logs | For every request (a page, an image, the installer, the release manifest, a release package) the web server records your IP address, the date and time, the requested path, the response code and size, your browser's user-agent string and the referring page if your browser sends one. Purpose: operating, securing and troubleshooting the site. Legal basis: our legitimate interest in running a secure site. |
| Retention | Origin server logs are rotated daily and kept for 14 days, then deleted. Requests pass through an edge layer that terminates TLS and filters traffic; it processes the same connection data to route and protect the site, and keeps its logs for [pending: edge log retention]. |
| Cookies | None. The site sets no cookies and uses no local storage. |
| Scripts and trackers | None. The site delivers no JavaScript, no analytics, no advertising and no third-party embeds; its security policy forbids them. |
| Accounts and forms | None. There is nothing to sign up for and nothing to submit. |
| Hosting | The site is hosted on servers in the United States. The hosting provider of the origin server is DigitalOcean, LLC. |
3. What a MailtronX appliance sends to us
An installed appliance sends nothing to mailtronx.com except when it checks the release feed: when you click Check for updates or Install on the Patches page, or daily if you switch the automatic check on (it is off by default), the appliance fetches the manifest, its signature and the package from this site. That request carries your appliance's IP address and its software version (in the user-agent string) and is logged like any other request. No configuration, no statistics, no message data and no addresses are ever sent to us.
Some appliance features contact third parties directly from your appliance, under those parties' terms, not through us: Domain SMTP Validation queries public DNS resolvers and blocklist operators; Mail Tests sends a message to a deliverability tester you choose; the anti-spam engine queries public blocklists and, unless you switch it off, a public fuzzy-hash service. The documentation inside the appliance names each one.
4. Sharing
We do not sell, rent or share personal data. Log data is seen only by the people who operate the site and by the hosting and edge providers as processors of the connection. We disclose data only when the law requires it.
5. Your rights
Under the GDPR and the UK GDPR you may ask for access to, correction or erasure of your data, for restriction of or objection to its processing, and you may complain to your supervisory authority. Under the California Consumer Privacy Act you may ask what we hold about you and ask for its deletion; we do not sell or share personal information as the CCPA defines those terms, and we honour such requests without discrimination. Because a log line holds only an IP address and a request, we can usually act on a request only if you tell us the IP address and the time window concerned. Send requests to [pending: contact mailbox].
6. Children
The site is aimed at mail-server administrators and is not directed at children.
7. Changes
Changes to this policy are posted here with a new date.